Trifecta Tech Foundation

The Network Time Protocol is generally used completely unprotected, much like the web was before HTTPS. At FOSDEM 2026, Ruben explained how we aim to push adoption of secure time (NTS) using pools of NTS servers.

Video and slides: buff.ly/O4sfBKg

#fosdem2026 #opensource #timesynchronization

Ruben is headed to FOSDEM! Catch his talk 'Securing time with NTS' on Sun 1 Feb at 13.20 in room H.2215 (Ferrer)!

fosdem.org/2026/schedul...

@fosdem.org

#opensource #rustlang #fosdem

Zlib-rs is now feature-complete! We've released v0.6, the first version with a stable and complete API. The blog post has the details.

With thanks to our maintainer Folkert de Vries, our contributors and @sovereign.tech.

trifectatech.org/blog/zlib-rs...

#rust #rustlang

Video: sudo-rs and beyond (Ubuntu Summit 25.10) - Trifecta Tech Foundation After sudo-rs was included in the 25.10 release of Ubuntu, Marc was invited to the Ubuntu Summit to talk about the design choices that shaped sudo-rs. You can now watch the recording of the talk.

Sudo-rs maintainer Marc Schoolderman was invited to the 2025 Ubuntu Summit to talk about the design choices that shaped sudo-rs.

Watch the talk here: trifectatech.org/blog/video-s...

@canonicalltd.bsky.social

#rustlang

🙋 we're a public benefit org that develops and maintains infrastructure building blocks, in rust. Eg sudo, data compression (zlib, bzip2, zstd) and time synchronization (NTP & PTP)

Releases · trifectatechfoundation/sudo-rs A memory safe implementation of sudo and su. Contribute to trifectatechfoundation/sudo-rs development by creating an account on GitHub.

New release of sudo-rs! Version 0.2.11 is out with askpass and multi-lingual support.

Want to see sudo-rs in your language? You can start helping out today. PR's are welcome!

We thank the @sovereign.tech for investing in this work, as well as 15 external contributors!

github.com/trifectatech...

Calling for memory safety incentives in EU cybersecurity policies - Trifecta Tech Foundation

The joint statement “Improving Europe's cybersecurity posture through memory safety”, has now been published: trifectatech.org/blog/calling...

It calls for stronger #MemorySafety incentives in EU cybersecurity policies.

Thanks to all supporters and contributors!

#security

Emulating avx-512 intrinsics in Miri - Trifecta Tech Foundation Recently we've started work on using more avx512 features in zlib-rs. The avx512 family of target features provides SIMD intrinsics that use 512-bit vectors (double the size of avx2, which uses…

How do you test code that a CI machine won't run? To support avx-512 SIMD instructions in zlib-rs, we taught Miri how to emulate them.

trifectatech.org/blog/emulati...

#rustlang

Canonical with Jon Seager - Rust in Production Podcast | corrode Rust Consulting What does it take to rewrite the fou…

Canonical's Jon Seager talks about our sudo-rs and ntpd-rs (!) in ubuntu-ls.bsky.social, and his bold but level-headed vision on Rust's future for Ubuntu, in the Rust in Production podcast with Matthias Endler:

corrode.dev/podcast/s05e...

#rustlang #ubuntu @canonicalltd.bsky.social @jnsgr.uk

Support the call for Memory Safety incentives in EU cybersecurity policies - Trifecta Tech Foundation

The Rust Foundation has joined orgs across industry & open source to call for a more secure, memory-safe future for Europe. The path to safer digital infrastructure is clear — & it starts with modern, memory-safe tech.

Read the joint statement & add your support:

The statement will be presented to as many European policy-making bodies as can be reached in December.

We thank the contributors: @joshaas.bsky.social, Rebecca Rumbul, Thomas Rooijakkers, Jeffrey Vander Stoep, Benjamin Schilling, Christian Horchert, H.J. Bos, Erik Poll, Harry van Haaren.

3/3

The statement titled “Improving Europe's cybersecurity posture through memory safety” was authored by Tara Tarakiyee (Sovereign Tech Agency) and @hugovandepol.bsky.social (Trifecta Tech).

They will be collecting supporters throughout November, so please share this appeal in your network.

2/3

Support the call for Memory Safety incentives in EU cybersecurity policies - Trifecta Tech Foundation

Please support the call for Memory Safety incentives in EU cybersecurity policies.

If you agree with the position that memory safety should be on the EU and national cybersecurity agendas, please consider adding your name to this statement to show your support: trifectatech.org/blog/support...

1/3

Sudo-rs and beyond

Watch Marc's talk at the Ubuntu Summit in London, "Sudo-rs and beyond":

www.youtube.com/live/bEEamxJ...

@canonicalltd.bsky.social

#rust #rustlang #ubuntu

Canonical releases Ubuntu 25.10 Questing Quokka | Canonical The latest interim release of Ubuntu comes with compatibility enhancements at the silicon level, accessibility upgrades and a robust security posture that sets the stage for the next LTS. October 9,…

Ubuntu 25.10, running our sudo-rs as the default sudo, has just been released!

"Rust-based implementations of sudo and coreutils for improved memory safety"

canonical.com/blog/canonic...

#rust #rustlang

Frequently Asked Questions about sudo-rs - Trifecta Tech Foundation With sudo-rs coming to Ubuntu 25.10, the core team has collected and published the Frequently Asked Questions about sudo-rs. They will be updated if user curiosity calls for it.

Two days until the release of sudo-rs in Ubuntu 25.10 🚀
Here is everything you always wanted to know about sudo-rs:

trifectatech.org/blog/frequen...

#rust #ubuntu #rustlang

Improving state machine code generation - Trifecta Tech Foundation Over the past couple of months, Björn and I have been working on improving state machine code generation in the rust compiler, a rust project goal for 2025H1. In late June, PR 138780 was merged,…

Blog post by Folkert: How can we make Rust programs that use state machines even faster?

Trifecta Tech aims to create safe and robust infrastructure software, that's why we're dedicated to making Rust the go-to for performance-critical components like zlib&zstd.

trifectatech.org/blog/improvi...

The link to the Ubuntu blog post changed. New link: discourse.ubuntu.com/t/sudo-rs-is...

Sudo-rs on Ubuntu

** Major milestone ** our sudo-rs is the default sudo for the upcoming Ubuntu 🚀 🦀

More on the Ubuntu blog:
discourse.ubuntu.com/t/sudo-rs-is...

#rust #rustlang

NTS Pool at the IETF 123 Hackathon

Ruben and David are the champions (how cool is that?) for the NTS Pool session at the @ietf.org 123 Hackathon!

In parallel they will also work on NTPv5 interop testing and Network Time Security for PTP and CSPTP.

wiki.ietf.org/en/meeting/1...

#ietf123

sudo-rs Headed to Ubuntu Every day, system administrators all over the world ask their computers to perform security-sensitive tasks across privilege boundaries, such as a standard user executing a command as root. The softwa...

Our sudo-rs is headed to Ubuntu 25.10!

Write-up about the impact of the project and the collaboration with @tweedegolf.bsky.social and @ferroussystems.bsky.social, by our friends and project initiators at Prossimo:

www.memorysafety.org/blog/sudo-rs...

#rustlang #rust

sudo-rs Headed to Ubuntu Every day, system administrators all over the world ask their computers to perform security-sensitive tasks across privilege boundaries, such as a standard user executing a command as root. The softwa...

The success story of the memory-safe sudo-rs, the Rust implementation of the sudo command: www.memorysafety.org/blog/sudo-rs...

Thanks to Prossimo, Ferrous Systems and Trifecta Tech Foundation 🙏

@ferroussystems.bsky.social
@trifectatech.bsky.social

#rustlang #memorysafety #cybersecurity

Artwork of IETF 123 Madrid 19-25 July 2025

Trifecta Tech Foundation's David and Ruben in action at a PTP plugfest

Image announcement ntpd-rs support for Network Time Protocol version 5

David and Ruben are headed to Madrid for the 123rd @ietf.org meeting!
They'll join the NTP WG and work on NTP version 5, an NTS pool, and better time synchronization in general. Come find them to talk all-things-time!

More on NTPv5 & NTS: trifectatech.org/tags/ntpd-rs/

- Madrid 123 image by IETF

ntpd-rs now supports version 5 of the Network Time Protocol - Trifecta Tech Foundation

Time just got better!
ntpd-rs now optionally supports NTPv5, the next version of the Network Time Protocol.

trifectatech.org/blog/ntpd-rs...

#rustlang @sovereign.tech

Release Version 0.2.7 · trifectatechfoundation/sudo-rs To use the precompiled binaries attached below, consult our manual installation instructions Added Linux kernels older than 5.9 are now supported. Support for Defaults noexec/NOEXEC: on Linux syst...

A new release of sudo-rs is out! Highlights:
- Increased backwards compatibility with older Linux kernels.
- Programs executed can be prevented from running other programs (NOEXEC)
- Other usability improvements suggested and contributed by our users!

#rust #rustlang

github.com/trifectatech...

bzip2 crate switches from C to 100% rust - Trifecta Tech Foundation Today we published bzip2 version 0.6.0, which uses our rust implementation of the bzip2 algorithm, libbz2-rs-sys, by default. The bzip2 crate is now faster and easier to cross-compile.

Today we're switching the bzip2 crate from C to 100% rust:

trifectatech.org/blog/bzip2-c...

Thanks to: Alex Crichton and Radically Open Security, and to NLnet Foundation for funding the work through the e-Commons fund with financial support from @minbzk.bsky.social‬

#rustlang #rust

Ubuntu 25.10 Switches to Rust-based Sudo Ubuntu 25.10 will replace the sudo command with sudo-rs, a new Rust rewrite designed to improve memory safety and security. What does this mean for users?

ICYMI: Ubuntu 25.10 is to ship with a new version of 'sudo' written in Rust. #rustlang #ubuntu

Rust rewrites are kind of a long running joke in the world of Linux but soon you're not going to be able to escape them no matter how hard you try, Ubuntu 25... You Will Never Escape Rust Rewrites On Linux

We prefer to say "we'd love to be in your distro".

Nevertheless, a really good "sudo-rs explained" by @brodierobertson.xyz‬. Thanks!

www.youtube.com/watch?v=Le4i...

SIMD in zlib-rs (part 2): compare256 - Trifecta Tech Foundation In part 1 of the "SIMD in zlib-rs" series, we've seen that, with a bit of nudging, autovectorization can produce optimal code for some problems.

Our data compression projects aim to offer best-in-class performance.
@tweedegolf.bsky.social‬'s Folkert de Vries shows how SIMD helps us to speed up zlib-rs in compare256, a crucial part of the compression algorithm that finds repetitions in the input.

trifectatech.org/blog/simd-in...

#rustlang